Joomla 2 Curling – Joomla RCE & Privileged Automation Abuse Jan 1, 2026 Curling – Engagement Report Jan 1, 2026